CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-93633

A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access to publish a document that displays attacker-controlled content under the Zimbra origin. When processing a stylesheet containing non-ASCII characters, DefangFilter appends the final ASCII segment without sanitizing it. HTML stored as application/x-zimbra-doc can therefore retain CSS URL references that the normal sanitizer removes. An attacker can share a crafted document that loads external resources and displays a credential-collection form using Zimbra's own visual assets. Exploitation requires the victim to open the document in a browser that renders the content type inline; credential theft additionally requires form submission. ZCS 10.1.16 and 10.1.20 are affected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 14.4%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2026-93633

Synacor » Zimbra Collaboration Suite » Version: 10.0.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.0
Synacor » Zimbra Collaboration Suite » Version: 10.0.1

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.1
Synacor » Zimbra Collaboration Suite » Version: 10.0.10

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.10
Synacor » Zimbra Collaboration Suite » Version: 10.0.11

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.11
Synacor » Zimbra Collaboration Suite » Version: 10.0.12

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.12
Synacor » Zimbra Collaboration Suite » Version: 10.0.13

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.13
Synacor » Zimbra Collaboration Suite » Version: 10.0.14

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.14
Synacor » Zimbra Collaboration Suite » Version: 10.0.15

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.15
Synacor » Zimbra Collaboration Suite » Version: 10.0.16

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.16
Synacor » Zimbra Collaboration Suite » Version: 10.0.17

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.17
Synacor » Zimbra Collaboration Suite » Version: 10.0.18

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.18
Synacor » Zimbra Collaboration Suite » Version: 10.0.2

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.2
Synacor » Zimbra Collaboration Suite » Version: 10.0.3

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.3
Synacor » Zimbra Collaboration Suite » Version: 10.0.4

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.4
Synacor » Zimbra Collaboration Suite » Version: 10.0.5

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.5
Synacor » Zimbra Collaboration Suite » Version: 10.0.6

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.6
Synacor » Zimbra Collaboration Suite » Version: 10.0.7

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.7
Synacor » Zimbra Collaboration Suite » Version: 10.0.8

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.8
Synacor » Zimbra Collaboration Suite » Version: 10.0.9

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.0.9
Synacor » Zimbra Collaboration Suite » Version: 10.1.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.0
Synacor » Zimbra Collaboration Suite » Version: 10.1.1

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.1
Synacor » Zimbra Collaboration Suite » Version: 10.1.10

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.10
Synacor » Zimbra Collaboration Suite » Version: 10.1.11

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.11
Synacor » Zimbra Collaboration Suite » Version: 10.1.12

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.12
Synacor » Zimbra Collaboration Suite » Version: 10.1.13

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.13
Synacor » Zimbra Collaboration Suite » Version: 10.1.14

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.14
Synacor » Zimbra Collaboration Suite » Version: 10.1.15

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.15
Synacor » Zimbra Collaboration Suite » Version: 10.1.16

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.16
Synacor » Zimbra Collaboration Suite » Version: 10.1.17

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.17
Synacor » Zimbra Collaboration Suite » Version: 10.1.18

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.18
Synacor » Zimbra Collaboration Suite » Version: 10.1.19

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.19
Synacor » Zimbra Collaboration Suite » Version: 10.1.2

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.2
Synacor » Zimbra Collaboration Suite » Version: 10.1.20

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.20
Synacor » Zimbra Collaboration Suite » Version: 10.1.3

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.3
Synacor » Zimbra Collaboration Suite » Version: 10.1.4

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.4
Synacor » Zimbra Collaboration Suite » Version: 10.1.5

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.5
Synacor » Zimbra Collaboration Suite » Version: 10.1.6

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.6
Synacor » Zimbra Collaboration Suite » Version: 10.1.7

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.7
Synacor » Zimbra Collaboration Suite » Version: 10.1.8

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.8
Synacor » Zimbra Collaboration Suite » Version: 10.1.9

cpe:2.3:a:synacor:zimbra_collaboration_suite:10.1.9
Synacor » Zimbra Collaboration Suite » Version: 6.0.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.0
Synacor » Zimbra Collaboration Suite » Version: 6.0.1

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.1
Synacor » Zimbra Collaboration Suite » Version: 6.0.10

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.10
Synacor » Zimbra Collaboration Suite » Version: 6.0.12

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.12
Synacor » Zimbra Collaboration Suite » Version: 6.0.13

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.13
Synacor » Zimbra Collaboration Suite » Version: 6.0.14

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.14
Synacor » Zimbra Collaboration Suite » Version: 6.0.15

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.15
Synacor » Zimbra Collaboration Suite » Version: 6.0.16

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.16
Synacor » Zimbra Collaboration Suite » Version: 6.0.2

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.2
Synacor » Zimbra Collaboration Suite » Version: 6.0.3

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.3
Synacor » Zimbra Collaboration Suite » Version: 6.0.4

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.4
Synacor » Zimbra Collaboration Suite » Version: 6.0.5

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.5
Synacor » Zimbra Collaboration Suite » Version: 6.0.6

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.6
Synacor » Zimbra Collaboration Suite » Version: 6.0.7

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.7
Synacor » Zimbra Collaboration Suite » Version: 6.0.8

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.8
Synacor » Zimbra Collaboration Suite » Version: 6.0.9

cpe:2.3:a:synacor:zimbra_collaboration_suite:6.0.9
Synacor » Zimbra Collaboration Suite » Version: 7.2.7

cpe:2.3:a:synacor:zimbra_collaboration_suite:7.2.7
Synacor » Zimbra Collaboration Suite » Version: 8.0.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.0
Synacor » Zimbra Collaboration Suite » Version: 8.0.1

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.1
Synacor » Zimbra Collaboration Suite » Version: 8.0.2

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.2
Synacor » Zimbra Collaboration Suite » Version: 8.0.3

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.3
Synacor » Zimbra Collaboration Suite » Version: 8.0.4

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.4
Synacor » Zimbra Collaboration Suite » Version: 8.0.5

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.5
Synacor » Zimbra Collaboration Suite » Version: 8.0.6

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.6
Synacor » Zimbra Collaboration Suite » Version: 8.0.7

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.7
Synacor » Zimbra Collaboration Suite » Version: 8.0.8

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.8
Synacor » Zimbra Collaboration Suite » Version: 8.0.9

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.0.9
Synacor » Zimbra Collaboration Suite » Version: 8.5.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.5.0
Synacor » Zimbra Collaboration Suite » Version: 8.5.1

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.5.1
Synacor » Zimbra Collaboration Suite » Version: 8.6.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.6.0
Synacor » Zimbra Collaboration Suite » Version: 8.7.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.0
Synacor » Zimbra Collaboration Suite » Version: 8.7.1

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.1
Synacor » Zimbra Collaboration Suite » Version: 8.7.10

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.10
Synacor » Zimbra Collaboration Suite » Version: 8.7.11

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.11
Synacor » Zimbra Collaboration Suite » Version: 8.7.2

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.2
Synacor » Zimbra Collaboration Suite » Version: 8.7.3

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.3
Synacor » Zimbra Collaboration Suite » Version: 8.7.4

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.4
Synacor » Zimbra Collaboration Suite » Version: 8.7.5

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.5
Synacor » Zimbra Collaboration Suite » Version: 8.7.6

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.6
Synacor » Zimbra Collaboration Suite » Version: 8.7.7

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.7
Synacor » Zimbra Collaboration Suite » Version: 8.7.8

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.8
Synacor » Zimbra Collaboration Suite » Version: 8.7.9

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.7.9
Synacor » Zimbra Collaboration Suite » Version: 8.8.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.0
Synacor » Zimbra Collaboration Suite » Version: 8.8.1

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.1
Synacor » Zimbra Collaboration Suite » Version: 8.8.10

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.10
Synacor » Zimbra Collaboration Suite » Version: 8.8.11

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.11
Synacor » Zimbra Collaboration Suite » Version: 8.8.12

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.12
Synacor » Zimbra Collaboration Suite » Version: 8.8.15

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.15
Synacor » Zimbra Collaboration Suite » Version: 8.8.2

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.2
Synacor » Zimbra Collaboration Suite » Version: 8.8.3

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.3
Synacor » Zimbra Collaboration Suite » Version: 8.8.4

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.4
Synacor » Zimbra Collaboration Suite » Version: 8.8.5

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.5
Synacor » Zimbra Collaboration Suite » Version: 8.8.6

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.6
Synacor » Zimbra Collaboration Suite » Version: 8.8.7

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.7
Synacor » Zimbra Collaboration Suite » Version: 8.8.8

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.8
Synacor » Zimbra Collaboration Suite » Version: 8.8.9

cpe:2.3:a:synacor:zimbra_collaboration_suite:8.8.9
Synacor » Zimbra Collaboration Suite » Version: 9.0.0

cpe:2.3:a:synacor:zimbra_collaboration_suite:9.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-93633

Products

Pricing

Contact Us